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Question: 1 


DRAG DROP 

Refer to the Exhibit. 

The laC configuration for an application is being deployed using a CI/CD pipeline. Drag and drop the 
steps for this pipeline from the left into the correct order that they would be executed on the right. Not 
all options are used. 


step 1 


step 2 


step 3 


step 4 


Answer: 


Explanation: 


- The code repository is updated by a user. 

- The Cl tool is notified of an update. 

- Integration test of the most recent configurations is performed 
- The configuration changes are pushed to devices. 


Question: 2 


A DevOps engineer must validate the working state of the network before implementing a CI/CD 
pipeline model. Which configuration management tool is designed to accomplish this? 


A. Jenkins 

B. Genie CLI 

C. Travis Cl 

D. Python YAML data libraries 
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Answer: B 


Explanation: 

Genie CLI is a configuration management tool that is designed to validate the working state of the 
network before implementing a CI/CD pipeline model. Genie CLI provides a set of commands that can be 
used to check the state of the network, view logs, and make changes to network configurations. It is a 
powerful tool for validating the state of the network before making changes, and can help avoid costly 
mistakes or unexpected issues. 


Question: 3 


Which two practices help make the security of an application a more integral part of the software 
development lifecycle? (Choose two.) 


A. Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution. 
B. Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution. 

C. Use only software modules that are written by the internal team. 

D. Add a step to the CI/CD pipeline to modify the release plan so that updated versions of the software 
are made available more often. 

E. Ensure that the code repository server has enabled drive encryption and stores the keys on a Trusted 
Platform Module or Hardware Security Module. 


Answer: AB 


Explanation: 

Adding a step to the CI/CD pipeline that runs a dynamic code analysis tool and a static code analysis tool 
during the pipeline execution helps make the security of an application a more integral part of the 
software development lifecycle. Dynamic code analysis tools search for coding errors and vulnerabilities 
while the application is running, while static code analysis tools scan the source code for potential errors 
and vulnerabilities. This ensures that any security issues are identified and addressed before the 
application is deployed. Additionally, using automated tools helps to reduce the amount of manual effort 
required for security testing and can reduce the risk of security flaws being introduced. 


Question: 4 


A CI/CD pipeline that builds infrastructure components using Terraform must be designed. A step in the 
pipeline is needed that checks for errors in any of the .tf files in the working directory. It also checks the 
existing state of the defined infrastructure. 


Which command does the pipeline run to accomplish this goal? 


A. terraform plan 

B. terraform check 
C. terraform fmt 

D. terraform validate 


Answer: A 


Explanation: 
https://www.terraform.io/docs/cli/commands/validate "use the terraform plan command instead, 
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which includes an implied validation check." 


Question: 5 


Which type of testing should be integrated into a CI/CD pipeline to ensure the correct behavior of all of 
the modules in the source code that were developed using TDD? 


A. soak testing 
B. unit testing 
C. load testing 
D. volume testing 


Answer: B 


Explanation: 
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